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(1) Objection to the Specification 

The Examiner's Answer indicates that the objection to the specification is not appealable 
However, the objection forms the basis of the 1 12 first paragraph rejection. Accordingly, the 
Applicants request that the arguments in the Appeal Brief concerning the objection be considered 
for the 1 12 first paragraph rejection. 

(2) Examiner's Arguments (i) Concerning 112 First Paragraph Rejection of Claim 42 
(page 18 of the Examiner's Answer) 

The Examiner argues that the specification docs not support storing the received label 
upon the condition that any label stored in the table docs not match the received label. Claim 42 
recites, 

if a label stored at an intermediate peer of the plurality of peers docs not 4 match Ac 
predetermined label in the set-up message, the intermediate peer stores the 
predetermined label and the corresponding identity of the next peer. 

Claim 42 docs not recite the condition, "if any stored label does not match, " Instead, 
claim 42 recites if "a" label does not match, , - Thus, the condition of if the predetermined 
label is not present in the table, which is disclosed in the specification, provides support for the 
claimed condition of if a label docs not match. 
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(3) Examiner's Arguments (iii) Concerning Index Peers (page 20 of the Examiner's 
Answer) 

On page 20 of the Examiner's Answer, in sections (iii), the Examiner argues that every 
peer in the path in Goldschlag is an index peer, and the index peers are indexed in a table stored 
on each of the peers in the path* Sec Goldschlag; p.5, par. 1; p. 1 0, par. 3. 

Even given this new interpretation of Goldschlag, Goldshlag fails to teach the features of 
claim 1 , 

A short description of Goldschlag is as follows, and then an indication of the claimed 
features not taught is provided. In section 3.1 on page 6 of Goldschlag, Goldschlag discloses 
creating virtual circuits between routing nodes in a path. This is done by sending an onion, such 
as shown in figure 2. A message is created which includes the onion and a header. The header 
includes a circuit identifier and the ''create" command. Each node that receives the onion, peels 
a layer off the onion to determine the next node. Also, each node stores in a table the received 
circuit identifier and a new circuit identifier chosen by the node, along with forward and 
backward cryptographic function/key pairs. The received circuit identifier is later used to search 
the tabic to identify the circuit identifier (previously chosen by the node) for sending to the next 
node and for identifying the appropriate function/key pair. Figure 3 shows an example of a 
virtual circuit created using the onion, which includes nodes W, X, Y and 2. 

After the virtual drcuit is created, data may be sent along the virtual circuit using a 
"data" command. The "data" command is described in Goldschlag on page 1 1, first full 
paragraph. For example, the initiator node prc-crypts data in layers using the forward 
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function/key encryption pairs for each node in the path of the virtual circuit The inner most 
layer of the prc-cryptcd data is encrypted with the responded (eg,, node 2 shown in figure 3) 
forward function/key pair, and the next higher layer is pre-cryptcd with the forward function/key 
pair of the node (eg., node Y) next to the rcspondcr, and so on. The prc-cryptcd data with all the 
layers is sent in a message from the initiator to the next node in the path (eg., node X). The 
message also includes the ik labcP\ Lc., the virtual circuit identifier, previously sent to node X 
with the "create" onion- Node X uses the label to perform a lookup to determine the virtual 
circuit identifier previously chosen by the node X, which is used to send the "data" onion to 
Node Y. The lookup also identifies the forward function/key pair for the virtual circuit. The 
forward function/key pair is used to peel (ia, dectypt) a layer Scorn the "data" onion, and the 
retrieved virtual circuit identifier is used to send the peeled, "data" onion to the next node, which 
is Node Y. 

Given the interpretation that all the nodes in the path are index nodes, Goldschlag still 
fails to teach the following features of claim 1 : 

determining a next peer according to said path for said information by 
searching said tabic of each peer of said plurality of peers with said path index as 
an index into said table; 

retrieving an identity of said next peer according to said path for said 
information and a respective index peer of said next peer; 

encrypting said path index with a public key of said respective index peer 
of said next peer to form a next state of said path index; and 

5 
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transmitting a new message with said information and said next state of 
said path index as said path index to said next peer. 

When the virtual circuit is created using the "create" command, Goldschlag does not 
determine a next peer by searching a table using the path index. Instead, the next node is 
determined by decrypting the layer using its public key. See figure 2 and page 5, line 2. When 
data is sent in an onion using the "data" command, the received virtual circuit identifier is used 
to perform a lookup in the receiving node table to determine the corresponding stored virtual 
circuit identifier identifying the next node. However, claim 1 recites encrypting said path index 
with a public key of said respective index peer of said next peer to form a next state of said path 
index, Goldshlag docs not disclose this stored virtual circuit identifier is encrypted. When the 
"data" onion is pre-crypted by the initator, it knows the forward function/key pairs for the nodes 
in the path. However, the initiator docs know the virtual circuit identifiers chosen by each of the 
nodes in the path. Thus, this information is not encrypted, and is instead included in the header 
of the message sent to the next node by each node receiving the "data" onion* Furthermore, if 
the message, including the header, were encrypted, it could only be encrypted with the public 
key of the next node, and not the public key of a respective index node or another node in the 
path, because the receiving node (eg., Node X) only knows the next node in the path (eg., Node 
Y). The identities of al) the other nodes in the path are concealed by the onion, such as shown in 
figure 2, when the virtual circuit is created. 
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Again, taking the interpretation of the Examiner that all the nodes in the path arc index 
nodes, the steps of 

(1) retrieving an identity of said next peer according to said path for said information and 
a respective index peer of said next peer, and 

(2) encrypting said path index with a public key of said respective index peer of said next 
peer to form a next state of said path index 

would require a node in Goldschlag to retrieve the identity of a next node and another 
node in the path, and then encrypt an index with the public key of the another node in the path. 
However, a node in Goldschlag only knows the next node. The identity of the other nodes is 
concealed in the onion. Also, this interpretation would require encrypting the virtual circuit 
identifier (the path index) chosen by the node with the public key of a node in the path which is 
not the next node. A3 described above, Goldschlag fails to teach the virtual circuit identifier is 
encrypted. Also, the public key of a node that is not the next node is not known, so it cannot be 
used to encrypt the virtual circuit identifier. 

(4) Examiner's Arguments (ix) Concerning Encrypting a Transaction Identifier in 
Claim 21 (page 22 of the Examiner's Answer) 

The Examiner argues that expiration time identifies a valid transaction and thus is an 
identifier of a transaction. The Examiner further argues that the specification discloses the 
transaction identifier as a value, and the expiration time is a value. The Examiner, however, 
disregards the disclosure in the specification that the value is used to identify the requested 
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information. For example, the identifier is later used to by the peer privacy module to identify 
the requested information for the setup message. 

The expiration time of Goldschlag is a time. Specifically, it identifies a time when an 
onion expires. It does not identify a transaction, a message or requested information. It may be 
used to determine whether an onion is valid. However, it docs not specifically identify whether 
an onion is valid. Thus, it does not identify a "valid 1 ' transaction as alleged by the Examiner 
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(5) Conclusion 

For at least the reasons given above, the rejection of claims 1, 3-20, and 22-29 is improper* 
Accordingly, it is respectfully requested that such a rejection by the examiner be reversed and these 
claims be allowed- Attached below for the Board's convenience is an Appendix of claims 1 , 3-20, 
and 22-29 as currently pending and on appeal. 

Please grant any required extensions of time and charge any fees due in connection with 
this Appeal Brief to deposit account no. 08-2025. 



Respectfully submitted, 
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